Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: i323q+CYOjQPp//UwYRCUZ9ASfhTiN/nQmiZNgusZKA=
Subject key identifier: 57:3A:AF:F2:C0:B2:66:B2:22:70:AC:09:E3:53:97:F5:2B:84:DF:F7
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019CAAC72332A64E6E245992819CF9428CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 189B
Signing time: Sun 01 Mar 2026 19:01:43 +0000
Manifest this update: Sun 01 Mar 2026 19:01:43 +0000
Manifest next update: Mon 02 Mar 2026 19:01:43 +0000
Files and hashes: 1: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
2: 5zkuP4f6OhG906lENMd0u8ubDAk.roa (hash: YlOICpFCtmb97ck88zaKf43d9/Nr2CXsuArLswhCmIc=)
3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
4: FQaFiTcf67x6YrpuBrF65w_8hug.roa (hash: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=)
5: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
6: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
7: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
8: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: 7uGIAdZ6SOPAbA7QoY7UCbfq1TCcQcNm7fo2evvB2Uc=)
9: nLprKdrMRzPeJXL9QJaCu2iaWQA.roa (hash: yHFQtY87SyBjc63nzUiLzWjw5L0xfoofMzuerU2tuZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:23:32:a6:4e:6e:24:59:92:81:9c:f9:42:8c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Mar 1 19:01:43 2026 GMT
Not After : Mar 2 19:01:43 2026 GMT
Subject: CN=573aaff2c0b266b22270ac09e35397f52b84dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:cf:a3:cd:d5:42:56:a9:b9:bb:42:6e:75:
d5:86:44:38:5d:e7:78:2f:13:64:52:78:6c:e0:80:
ae:41:df:14:93:7e:a6:4f:12:cb:06:fc:e5:67:ef:
8c:39:66:2d:df:8d:9c:0e:75:3e:e9:be:ba:50:07:
fc:3f:6d:23:d9:97:8b:1d:2c:b8:7a:52:06:69:fb:
43:9c:67:c3:fc:c7:b6:2b:24:0f:a7:d4:ab:85:94:
6b:d3:0b:75:68:41:1a:1b:53:c1:d1:67:0a:1b:e0:
26:05:97:d2:1d:25:5b:93:1c:47:5d:62:4a:13:16:
15:cf:7e:da:3d:aa:35:c6:54:bb:4c:1b:00:3b:7f:
d6:e8:58:b2:f2:7c:ad:e0:46:a6:04:af:4e:ae:0b:
4d:ce:61:81:10:b4:9d:75:e6:08:0d:0b:e7:c0:c1:
30:6f:50:a6:39:6e:37:03:ac:91:80:03:14:8e:a1:
9d:dc:21:7d:25:05:6d:a0:cc:08:1e:3e:da:a3:55:
1e:07:53:1d:ba:48:31:1e:e1:39:73:7a:54:d2:9d:
64:a4:fe:22:ab:c8:c7:79:3c:ac:c9:db:21:0e:84:
18:aa:1e:2a:0f:55:53:e9:46:65:42:f2:8b:f4:3a:
5d:9f:81:8e:d4:57:d9:31:66:8f:90:ad:3f:a8:6e:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:AF:F2:C0:B2:66:B2:22:70:AC:09:E3:53:97:F5:2B:84:DF:F7
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:31:49:a7:ff:48:66:a7:4b:87:b4:51:ed:d0:d8:c4:3d:e6:
d1:1a:20:69:bc:29:48:9f:ab:25:d8:78:c2:d2:b8:82:ec:46:
6f:36:cd:ef:a2:7d:15:33:38:53:c6:40:49:54:0f:71:ef:87:
9a:a5:c9:d1:f5:82:cb:78:f1:ff:4a:28:4c:a7:c0:ac:ce:dd:
17:fa:e2:41:d4:33:35:fa:8c:e1:24:a2:73:76:4d:d3:a3:f8:
b3:0e:cf:95:14:96:56:17:6f:50:5b:d3:bc:6f:58:9e:f9:30:
6d:ce:03:6d:e2:ad:bd:8b:70:b5:bf:44:53:41:cd:f5:81:5b:
29:a2:df:08:f3:34:7c:47:57:92:78:4d:24:69:a5:ac:56:ac:
b9:0d:09:32:71:bc:f7:77:1d:64:b2:6e:1d:6c:99:80:ed:36:
91:95:5a:17:68:05:7d:94:0e:f5:ac:13:04:79:1a:72:26:98:
47:8c:ac:19:1c:a8:0e:cc:94:63:5e:46:7d:05:0f:4c:3e:ca:
df:e8:b7:77:bf:0d:1b:de:88:5b:ce:bd:61:44:2e:e4:c0:d7:
6b:5e:07:e6:be:e7:16:7b:fd:ff:82:6b:c0:a2:5f:38:da:d6:
c9:c7:2a:bc:65:5e:5d:62:d9:bc:bf:4c:62:a3:9c:dd:37:0f:
c7:6c:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:05 2026 by rpki-client